CVE-2018-20137

CVE-2018-20137 affects FUEL CMS 1.4.3. The vulnerability is a cross-site scripting flaw exposed in page data management, specifically via the Page title, Meta description, or Meta keywords in the pages/edit/1?lang=english URI. The connected documents confirm the issue but do not provide a fix or ...

IBM BigFix Remote Control Information Disclosure Vulnerability (CNVD-2016-11863)

IBM BigFix Remote Control is a set of remote control systems from IBM in the United States. An information disclosure vulnerability exists in IBM BigFix Remote Control 9.1.2 and earlier versions. A local attacker can exploit this vulnerability to obtain sensitive information by reading cached pag...

Mozilla: Resource Timing API is storing resources sent by the previous page (MFSA 2016-84, MFSA 2016-86)

Mozilla Firefox before 48.0, Firefox ESR 45.4 and Thunderbird 45.4 allow remote attackers to obtain sensitive information about the previously retrieved page via Resource Timing API calls...

Mozilla Firefox Resource Timing API Call Information Disclosure Vulnerability

Mozilla Firefox is an open source web browser; A security vulnerability exists in Mozilla Firefox's handling of Resource Timing API calls, which allows remote attackers to build malicious web pages that can be exploited to trick users into parsing and obtaining sensitive information related to th...

DEBIAN-CVE-2007-2383

The Prototype prototypejs framework before 1.5.1 RC3 exchanges data using JavaScript Object Notation JSON without an associated protection scheme, which allows remote attackers to obtain the data via a web page that retrieves the data through a URL in the SRC attribute of a SCRIPT element and...

security flaw

The page cache feature in Mozilla Firefox before 1.5.0.10 and 2.x before 2.0.0.2, and SeaMonkey before 1.0.8 can generate hash collisions that cause page data to be appended to the wrong page cache, which allows remote attackers to obtain sensitive information or enable further attack vectors whe...